Mail.app MCP server
io.github.p-l-ta/mail-mcp·v1.3.5·1 starsSearch, read, send, and manage email via macOS Mail.app across all configured accounts.
1 stars41 downloads/wk
Reviews
Write oneNobody has reviewed Mail.app yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Mail.app tools (6, 4 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
check_compatibilityProbe each mail-mcp dependency (Envelope Index schema, SyncedRules.plist, AppleScript, MailData directory) and report pass/fail. Run this after a macOS update to verify nothing broke.
create_rulewrite actionCreate a new Mail.app rule. A timestamped backup of SyncedRules.plist is made before writing. Mail.app may need to be restarted for the rule to take effect.
delete_rulewrite actionPermanently delete a Mail.app rule by its RuleId. A timestamped backup of SyncedRules.plist is made before writing so the deletion can be undone. Mail.app may need to be restarted for the change to take effect.
list_rulesList all Mail.app rules with their conditions and actions. Reads directly from SyncedRules.plist.
submit_feedbackwrite actionOpen a pre-filled GitHub issue for mail-mcp (…) in the default browser. Automatically includes macOS version and mail-mcp version in the issue body.
update_rulewrite actionUpdate an existing Mail.app rule by its RuleId (use list_rules to find IDs). A timestamped backup is made before writing. Mail.app may need to be restarted for changes to take effect.
Public scan report
scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it
- Code scan66 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 78 days ago12/15
- Maintainer identityregistry namespace matches repository owner6/10
How Mail.app compares
Against every graded Email MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 85/100
- higher than 78% of 914 Email servers
- Tools
- 6
- the typical Email server has 7
- Tools that change things
- 67%
- typical: 25%. Fewer write tools means less an agent can break
- GitHub stars
- 1
- more than 65% of 492 Email servers
- Downloads a week
- 41
- more than 30% of 231 Email servers with a package
What its tools let an agent do: 2 read · 1 create · 2 change · 1 delete
Install Mail.app in Claude Code, Cursor or VS Code
Runs npx -y @p-l-ta/mail-mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add mail-mcp -- npx -y @p-l-ta/mail-mcp
What the publisher says
From the Mail.app repository's README, as published. We do not edit it. Read it on GitHub
mail-mcp
MCP server that gives Claude (and other MCP hosts) full access to Mail.app on macOS — search, read, send, reply, flag, move, and more — across every account configured in Mail.app (iCloud, Exchange, IMAP, etc.).
Prerequisites
- macOS (Mail.app required)
- Node.js 20+
- An MCP host: Claude Desktop, Amazon Quick, or any stdio MCP client
Installation
Claude Desktop — one-click install (recommended)
- Download mail-mcp.mcpb from the latest release
- Double-click the .mcpb file — Claude Desktop installs it automatically
- Grant the required macOS permissions (see below)
Manual / Amazon Quick / other hosts
npx @p-l-ta/mail-mcpOr install globally:
npm install -g @p-l-ta/mail-mcp
mail-mcpPoint your MCP host at the mail-mcp binary (stdio transport). Example config:
{
"mcpServers": {
"mail-app": {
"command": "npx",
"args": ["@p-l-ta/mail-mcp"]
}
}
}Required macOS permissions
Grant these to the application that runs the MCP host (Claude Desktop, Amazon Quick, etc.):
The MCP server process inherits permissions from the host application that launches it.
Tools
How it works
- Search & read — queries Mail's own Envelope Index SQLite database directly for fast, structured results across all accounts
- Actions (send, reply, flag, move, trash) — driven by AppleScript automation against Mail.app, so they work even for accounts where messages aren't stored as local files
Development
npm install
npm run dev # tsx watch — live reload
npm test # vitest unit tests
npm run build # compile TypeScript → dist/
npm run mcpb # build Claude Desktop extension → build/mail-mcp.mcpbInteractive MCP testing:
npm run build
npx @modelcontextprotocol/inspector node dist/server.jsPrivacy Policy
mail-mcp is a local MCP server that runs entirely on your Mac. It has no backend, no telemetry, and makes no network requests of its own.
What it accesses:
- Mail.app's Envelope Index database (~/Library/Mail/) — read-only, used for search queries
- Mail.app via AppleScript — to read message bodies, send mail, flag, move, and trash messages
What it does NOT do:
- Collect, store, or transmit any data outside your Mac
- Connect to any external server or API
- Log message content anywhere
All email data stays on your device and is only passed to the MCP host (Claude Desktop or another client) as part of normal tool responses. You control exactly which tools Claude can invoke.
License
MIT
Nothing above is checked by us. What we check is on the safety report.
Mail.app: common questions
- Is Mail.app MCP server safe?
- Yes, by our scan: it is graded A (85/100). Read the Mail.app safety report
- How do I install Mail.app?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Mail.app need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Mail.app maintained?
- The last commit was 115 days ago (2026-07-10). The latest release is v1.3.5.
- What can I use instead of Mail.app?
- Servers from other publishers that do the same job: Agenticmail MCP server, Openagentemail MCP server and Agent Email MCP server.
- How does Mail.app compare with other Email MCP servers?
- safety score 85/100 (higher than 78% of 914 Email servers); tools 6 (the typical Email server has 7); tools that change things 67% (typical: 25%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to Mail.app
Same job from other publishers: the closest match first, then the best rated.
- AgenticmailReal email and SMS for AI agents — send mail, receive verification codes, drive a real inbox.not reviewedEstablishedB
- OpenagentemailUnlimited agent mailboxes — create identities, read/wait for mail, extract OTPs, send email.not reviewedGrowingB
- Agent EmailLocal email connectivity for AI agents — read, draft, send, and organize Outlook mail via MCPnot reviewedGrowingA
- Proton Mail (unofficial)Unofficial Proton Mail MCP — send, read, search & organize email over SMTP and IMAPnot reviewedGrowingB
- MailboxMulti-account email MCP server for Gmail, IMAP, and JMAP: search, send, drafts, labels.not reviewedGrowingB